Skip to content
Setup FoundrySetup Foundry

Documentation

Minimum password length

This local account policy defines the minimum number of characters that a password must contain.

since 0.9.8.11

Purpose

Account policy: net accounts /minpwlen:14

This local account policy defines the minimum number of characters that a password must contain. With a value of 14, Windows accepts newly assigned, reset, or changed passwords for affected local user accounts only when they contain at least 14 characters.

The change does not automatically invalidate shorter passwords that already exist. The requirement is enforced when a new password is subsequently assigned to the account.

Notes

Security

A 14-character minimum increases the possible password space and therefore makes brute-force and dictionary attacks more difficult than they would be with shorter passwords. This setting alone does not ensure password quality or uniqueness. Character-composition requirements, password history, and account-lockout rules are controlled by separate security settings.

Possible side effects

Applications, installation processes, or account-management functions can fail when they attempt to create or change a local account password containing fewer than 14 characters. Longer minimum passwords can also result in more typing errors, forgotten passwords, and—when an account lockout policy is in effect—account lockouts.

Notes

Because the setting is applied here as a local account policy without the /DOMAIN option, it affects passwords for local user accounts on the computer. Domain-account passwords are governed by the domain password policy or by an applicable fine-grained password policy.

The policy change does not require a restart. In particular, it does not force accounts with existing passwords to change them immediately.

Microsoft documentation

Microsoft Learn: Minimum password length

Microsoft Learn: Password Policies – MinimumPasswordLength

See also